Codex App leaves 1GB `Codex.app.bundle` clones in macOS temp on every launch

What version of the Codex App are you using (From “About Codex” dialog)?

Codex App: 26.602.40724 (CFBundleVersion 3593) codex-cli 0.137.0-alpha.4

What subscription do you have?

Codex App leaves 1GB Codex.app.bundle clones in macOS temp on every launch

What platform is your computer?

Darwin 24.6.0 arm64 arm macOS 15.7.5 (24G624)

What issue are you seeing?

Every time the Codex desktop app is launched on macOS, it creates another full
copy of the app bundle under the per-user temporary X directory:

/var/folders/s0/hp2rpmhs47bg4v97wzwf9znw0000gn/X/com.openai.codex.code_sign_clone/code_sign_clone.<suffix>/Codex.app.bundle

Each clone is about 1.0G. Quitting the Codex app does not remove the clone, so
disk usage grows by about 1.0G per launch.

Observed state before one launch:

2.0G com.openai.codex.code_sign_clone
1.0G com.openai.codex.code_sign_clone/code_sign_clone.63Up5V
1.0G com.openai.codex.code_sign_clone/code_sign_clone.s5mniz

After launching Codex App once:

3.0G com.openai.codex.code_sign_clone
1.0G com.openai.codex.code_sign_clone/code_sign_clone.63Up5V
1.0G com.openai.codex.code_sign_clone/code_sign_clone.VFarCH
1.0G com.openai.codex.code_sign_clone/code_sign_clone.s5mniz

The newly-created directory was:

Jun  7 00:06:52 2026 created | Jun  7 00:08:38 2026 modified | /var/folders/s0/hp2rpmhs47bg4v97wzwf9znw0000gn/X/com.openai.codex.code_sign_clone/code_sign_clone.VFarCH

The app was then quit. The new clone remained in place, and lsof +D showed no
process holding files under com.openai.codex.code_sign_clone.

What steps can reproduce the bug?

1. On macOS, check the existing temp clone directory:

``sh
base="$(dirname "$(getconf DARWIN_USER_TEMP_DIR)")/X/com.openai.codex.code_sign_clone"
du -sh "$base" "$base"/* 2>/dev/null
``

1. Launch Codex App from /Applications/Codex.app.

1. Check the directory again:

``sh
base="$(dirname "$(getconf DARWIN_USER_TEMP_DIR)")/X/com.openai.codex.code_sign_clone"
du -sh "$base" "$base"/* 2>/dev/null
find "$base" -mindepth 1 -maxdepth 1 -type d -exec stat -f '%SB created | %Sm modified | %N' {} \;
``

1. Quit Codex App.

1. Check the directory again. The latest code_sign_clone.<suffix> directory is

still present.

What is the expected behavior?

Temporary code-signing clones should be removed after signing/validation/update
work completes, and should also be cleaned up when the app exits if they are no
longer in use.

Additional information

All clones contain a full Codex.app.bundle with bundle identifier
com.openai.codex.

The newly-created clone from the reproduction had:

CFBundleIdentifier: com.openai.codex
CFBundleName: Codex
CFBundleShortVersionString: 26.602.40724
CFBundleVersion: 3593

This looks related to the desktop app's macOS code-signing or updater flow. I
could not find code_sign_clone, Codex.app.bundle, Electron shell, or updater
implementation code in the public openai/codex repository, so this may need to
be fixed in the private desktop app packaging/updater code rather than in the
public CLI/app-server code.